Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
File:                     7bkm-MYDqrectGqIO_YyVko_qr8.mft (raw, json)
Hash identifier:          lU53eZMz+KgklEKmGOd269c8AJBzj8C5pvpfPAWlaA0=
Subject key identifier:   A9:34:78:FC:66:26:AD:9A:F6:0F:38:F9:34:73:F3:76:2E:0D:21:5E
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Certificate issuer:       /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial:       01A00282296624543393C519B49BCDB68AB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
Manifest number:          1A31
Signing time:             Fri 14 Aug 2026 23:01:19 +0000
Manifest this update:     Fri 14 Aug 2026 23:01:19 +0000
Manifest next update:     Sat 15 Aug 2026 23:01:19 +0000
Files and hashes:         1: 5CiJxwVbdUZ8eM7me5oInvUUaLg.asa (hash: dP8XoNIksXb4H+NwZjef9TLwaeJ0Qhddyzp+zEO5+gw=)
                          2: 7bkm-MYDqrectGqIO_YyVko_qr8.crl (hash: 4q6lGkNt6c22Me4E2jhwK4Vr8dJlI7ZpyOdHbmfmY3s=)
                          3: ZOavrk-QF97rJP_2jNT7lmVgOvE.roa (hash: r2s3h1w3Hjfzrez9cKoP8cqtXCYOTfAkva8ue3B7Z2Q=)
                          4: b4zo6KiTgoc5L-wE1iEGLa3ot54.roa (hash: 7qq5CHWNx2oa5BEGotuEcxfckS6TczcC6U6UJrqCLzo=)
                          5: ffZakNnkJ9qo1A3shFhtl9qXd_Q.roa (hash: zf21A+pRvsATbzNE1edRMBnzKSA0PFpPQRbeA3NRvG4=)
                          6: g2nNQ5VhHao4Apal56-pguzsiBg.asa (hash: gNuWJZ3S7x7XLK2/IgqTwexYiw/r4lDYIjTdNxVRqcE=)
                          7: ySpczFe0bFDpQcjPCdkMrRLgsk4.roa (hash: 4bkzvAWfxVndAxO5MdGK6YbLnfuFOHsrNBENCi5CdAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:82:29:66:24:54:33:93:c5:19:b4:9b:cd:b6:8a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
        Validity
            Not Before: Aug 14 23:01:19 2026 GMT
            Not After : Aug 15 23:01:19 2026 GMT
        Subject: CN=a93478fc6626ad9af60f38f93473f3762e0d215e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0a:bc:12:9d:78:9a:83:f6:b6:ee:11:2d:e4:
                    9c:12:78:cf:e7:37:f7:5a:53:f0:57:eb:7b:b8:96:
                    ba:cd:c3:9d:cb:c5:f2:5a:68:28:d0:dd:90:42:cf:
                    83:09:e5:2d:4c:26:29:d7:5c:e5:01:6f:75:eb:2c:
                    91:6c:6b:21:e3:1d:a3:65:24:e1:04:fc:5b:8b:b9:
                    0d:09:a0:08:58:dc:a9:84:d5:8f:e1:65:97:ef:ae:
                    55:2e:bd:b8:43:e4:74:2a:c4:6f:08:e9:c3:4b:67:
                    20:79:88:bb:88:5f:cd:98:c1:2e:b9:94:c7:b8:89:
                    37:ad:db:51:08:37:60:d3:84:72:f7:e0:9f:50:09:
                    78:1f:16:d4:52:8c:ad:f0:f4:3a:87:1a:a5:ae:15:
                    fb:0a:dd:69:3a:ed:dd:36:ac:a3:52:e9:38:14:9f:
                    21:f2:3f:8a:bd:90:a9:90:52:46:f5:e3:ab:d8:bc:
                    bf:ab:6e:94:71:39:24:84:b8:30:04:26:7c:21:67:
                    20:55:75:49:95:7a:72:51:2d:ea:e0:49:82:a0:a1:
                    68:1d:5e:f9:8d:66:84:3b:0c:77:18:c7:46:36:7f:
                    24:70:1f:81:ea:89:bf:a0:04:52:73:4a:a7:3b:4a:
                    f0:b4:ae:65:5d:07:15:a1:2e:94:6d:13:e9:14:e6:
                    f4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:34:78:FC:66:26:AD:9A:F6:0F:38:F9:34:73:F3:76:2E:0D:21:5E
            X509v3 Authority Key Identifier:
                keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:3a:91:d4:a7:58:5a:88:29:af:d5:d8:47:8d:d7:29:fc:05:
         1b:4f:e7:e1:9e:ae:78:9c:70:24:19:44:2e:a9:df:63:b8:26:
         91:94:5e:48:ff:d4:16:45:99:25:1e:3e:c3:11:a6:b9:26:02:
         95:15:b3:37:ed:ec:1a:89:3c:df:20:17:05:aa:da:0e:82:ba:
         29:1a:8d:de:6d:99:c3:ac:74:e3:21:5e:00:47:f0:39:25:e6:
         c0:10:22:b2:b3:b8:68:f6:06:be:d4:b9:5e:97:60:39:52:ab:
         64:00:f4:f4:97:7b:95:c3:59:cc:97:d1:1e:48:00:39:84:d2:
         7c:f6:2d:32:f9:7e:99:98:ca:e1:f3:ee:e6:6b:79:28:e0:be:
         4d:17:c5:b4:d0:3d:1f:ab:b3:bc:ad:8d:91:01:af:20:fb:bb:
         4a:b1:3f:71:c1:2b:63:f9:47:f6:dc:08:7a:9a:50:97:d2:14:
         19:2d:06:1c:14:f3:74:9f:6f:77:d5:dc:45:d1:6c:c1:df:66:
         84:b6:f2:2e:99:ea:e2:03:49:cf:32:fd:ba:55:e6:8e:1b:ea:
         f6:f1:fe:87:03:6d:10:a5:d9:9a:8c:55:85:a9:86:4f:57:cc:
         54:e6:aa:ac:4a:6f:ca:e5:2d:3b:46:cf:aa:e1:ef:b6:fc:64:
         fc:bf:08:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:18 2026 by rpki-client